Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

AD GPO

Info

The download for CIS Compliance remediation utilising AD GPO policies are detailed in this document to help remediating major non-compliant CIS controls.

Info

GPO Policy For CIS Compliance

ConnectSecure has Active Directory GPO templates for the required OS (Windows 10, Windows 11, Windows Server 2022, Windows Server 2016, Windows Server 2012, and Windows Server 2019) which helps in remediating major CIS controls.

...

>> C:\Users\hash\Downloads\LGPO\LGPO_30\LGPO.exe /b >> C:\Users\hash\Downloads\gpo_backup

...

  • Now Backup will be created in the folder.

  • Navigate to the downloaded LGPO folder and give space and give “/g” and give the path of the Compliance Remediation folder downloaded from the portal


eg. :

>> C:\Users\hash\Downloads\LGPO\LGPO_30\LGPO.exe /g C:\Users\hash\Downloads\GPO_Windows_10\GPO_Windows_10

...

Info

NOTE If the mentioned organization-specific User Rights Assignments are not modified within C:\LGPO\DoD Windows 10 v2r4\GPOs\{AD8929AD-5491-4E51-A04E-6588E76D85B6}\DomainSysvol\GPO\Machine\microsoft\windows nt\SecEdit\GptTmpl.inf prior to executing the script, LGPO would report the following error:

...